# Invalid Access Token for Listing Workspace Reservations

**URL:** <https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016>\
**Category:** Authentication\
**Created:** [April 2, 2024, 4:24pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016 "2024-04-02T16:24:37Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![t-data](https://avatars.discourse-cdn.com/v4/letter/t/43a26b/32.png) [@t-data](https://devforum.zoom.us/u/t-data)\
**Post date:** [April 2, 2024, 4:24pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/1 "2024-04-02T16:24:37Z")

</div>

Hello, Trying to call the List Reservations endpoint for workspaces and am getting the following error:  
{‘code’: 4711, ‘message’: ‘Invalid access token, does not contain scopes:[workspace:read:list\_reservations, workspace:read:list\_reservation:admin].’}

> **[Zoom Rooms API](https://developers.zoom.us/docs/zoom-rooms/apis/#operation/listReservations)**
>
> The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform.

Here is the endpoint - "‘[https://api.zoom.us/v2/workspaces/](https://api.zoom.us/v2/workspaces/)/reservations’. Have tried with multiple valid workspace ids as well.

I have verified that I have this scope added - “workspace:read:list\_reservation:admin”

This is using Oauth server to server, Account Level.

This app works with many other endpoints with no issue. Also have deleted it and re-created it multiple times with the same results. Looked through other discussions and tried published approaches but none worked. Any help is greatly appreciated. Thanks

---

<div class="post-metadata">

**Author:** ![rian](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rian/32/58202_2.png) [@rian](https://devforum.zoom.us/u/rian)\
**Post date:** [April 2, 2024, 6:37pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/2 "2024-04-02T18:37:11Z")

</div>

Same exact issue here. Tom, I think if you look close, you’ll see that you have the scope:  
`workspace:read:list_reservations:admin` ← note that reservation’s plural.

---

<div class="post-metadata">

**Author:** ![t-data](https://avatars.discourse-cdn.com/v4/letter/t/43a26b/32.png) [@t-data](https://devforum.zoom.us/u/t-data)\
**Post date:** [April 2, 2024, 6:56pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/3 "2024-04-02T18:56:54Z")

</div>

@rian, thanks for the reply. I had missed that. Were you able to correct it? Or do you still have the error as well?

I don’t have the list\_reservation:admin to select from the scopes available but gives me something to look into now.

---

<div class="post-metadata">

**Author:** ![rian](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rian/32/58202_2.png) [@rian](https://devforum.zoom.us/u/rian)\
**Post date:** [April 2, 2024, 7:01pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/4 "2024-04-02T19:01:12Z")

</div>

No. No dice here. I don’t have either of the two scopes that the API is requesting available:

```auto
 message: 'Invalid access token, does not contain scopes:[workspace:read:list_reservations, workspace:read:list_reservation:admin].'

```

I _do_ have the `workspace:read:list_reservations:admin` scope, which is the closest thing to what’s being requested.

---

<div class="post-metadata">

**Author:** ![rian](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rian/32/58202_2.png) [@rian](https://devforum.zoom.us/u/rian)\
**Post date:** [April 3, 2024, 10:24pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/5 "2024-04-03T22:24:01Z")

</div>

@t-data For what it’s worth, I tried to file a ticket on this since it appears to just be a broken endpoint, but you can’t do that unless you buy a Super Premium Deluxe Developer Support Contract. So, I fear we’re on our own until someone there notices.

---

<div class="post-metadata">

**Author:** ![testxpg1](https://avatars.discourse-cdn.com/v4/letter/t/858c86/32.png) [@testxpg1](https://devforum.zoom.us/u/testxpg1)\
**Post date:** [April 4, 2024, 12:30pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/6 "2024-04-04T12:30:13Z")

</div>

I have the same kind of issue with the POST /zoom\_events/events/{eventId}/tickets endpoint, where I also have the required scope. It really seems like some endpoint scope validations are broken on zoom side of things. Here is my post in case you want to watch here for answers as well [Create event ticket missing scope "zoom\_events:write:ticket"](https://devforum.zoom.us/t/create-event-ticket-missing-scope-zoom-eventsticket/107034)

---

<div class="post-metadata">

**Author:** ![deskengmwam](https://avatars.discourse-cdn.com/v4/letter/d/e8c25b/32.png) [@deskengmwam](https://devforum.zoom.us/u/deskengmwam)\
**Post date:** [April 8, 2024, 7:43pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/7 "2024-04-08T19:43:01Z")

</div>

Adding +1 for attention. Issue is definitely the difference in scope naming between what the token gets and what the endpoint expects (plural vs singular).

---

<div class="post-metadata">

**Author:** ![t-data](https://avatars.discourse-cdn.com/v4/letter/t/43a26b/32.png) [@t-data](https://devforum.zoom.us/u/t-data)\
**Post date:** [April 9, 2024, 3:52pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/8 "2024-04-09T15:52:32Z")

</div>

@elisa.zoom Just trying to reach out here to get some help on this issue. Any direction or other options to try would be very helpful.

---

<div class="post-metadata">

**Author:** ![alessio.ricci](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/alessio.ricci/32/58578_2.png) [@alessio.ricci](https://devforum.zoom.us/u/alessio.ricci)\
**Post date:** [April 11, 2024, 4:20pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/9 "2024-04-11T16:20:26Z")

</div>

Hi all, I have the same issue and must create a specific integration. I tried to open a ticket without any luck, so I am in direct contact with Zoom to see if they can investigate the issue.

This is the scope that we need:

workspace:read:list\_ **reservation** :admin

This is the available scope (with the syntax error):

workspace:read:list\_ **reservations** :admin

> **[unnamed hosted at ImgBB](https://ibb.co/YXG1x9h)**
>
> Image unnamed hosted in ImgBB

This is the error we get due to the situation illustrated above:

{“code”:4711,“message”:“Invalid access token, does not contain scopes:[workspace:read:list\_ **reservation** :admin].”}

@Samantha.Greatorex

---

<div class="post-metadata">

**Author:** ![alessio.ricci](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/alessio.ricci/32/58578_2.png) [@alessio.ricci](https://devforum.zoom.us/u/alessio.ricci)\
**Post date:** [April 23, 2024, 1:59pm UTC](https://devforum.zoom.us/t/invalid-access-token-for-listing-workspace-reservations/107016/10 "2024-04-23T13:59:30Z")

</div>

Hello everyone!

With the precious help of @Samantha.Greatorex, the issue has been fixed! 🥳
